Radare

Radare2

171 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2017-16359

Exploit
  • EPSS 1.17%
  • Veröffentlicht 01.11.2017 17:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c.

7.8

CVE-2017-15931

Exploit
  • EPSS 1.18%
  • Veröffentlicht 27.10.2017 18:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems.

7.8

CVE-2017-15932

Exploit
  • EPSS 1.18%
  • Veröffentlicht 27.10.2017 18:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems.

7.8

CVE-2017-15385

  • EPSS 1.03%
  • Veröffentlicht 16.10.2017 22:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service (r_read_le16 invalid write and application crash) or possibly have unspecified other impact via a crafted ELF...

7.8

CVE-2017-15368

  • EPSS 1.26%
  • Veröffentlicht 16.10.2017 01:29:01
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted WASM file that trigg...

7.8

CVE-2017-10929

  • EPSS 1.91%
  • Veröffentlicht 05.07.2017 12:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly ...

7.8

CVE-2017-9949

  • EPSS 1.79%
  • Veröffentlicht 26.06.2017 20:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibl...

5.5

CVE-2017-9761

  • EPSS 1.34%
  • Veröffentlicht 19.06.2017 16:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.

5.5

CVE-2017-9762

  • EPSS 1%
  • Veröffentlicht 19.06.2017 16:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file.

7.5

CVE-2017-9763

  • EPSS 4.15%
  • Veröffentlicht 19.06.2017 16:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file,...